rubion 0.3.18 → 0.3.20

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 25866a240d194626328073cc8f0e78b970dd1e8389563f8a2a636a23ccc545e3
-  data.tar.gz: bc7061c95fe6a24fd7cc464bf3671f26bc9d1a53eb248512d7b15c1c67efdbf6
+  metadata.gz: 2fb0ebd81ad4651b568178e9c0ecade87ca0de823ea8730cedb0bf32a1c41c18
+  data.tar.gz: 3807db5d586bc7ec2637d83d10ca605b146a2dc60409ec4a91906a718c11ccc8
 SHA512:
-  metadata.gz: aa33bfe89c56497e77cb63b9e518fe4f57673c53440971ee50b3ebe56f82f83ea39af26e74b5bd3e38036ef85270be2a778b900afce56027234e50c80acb7603
-  data.tar.gz: 536c26c682881e1516baeeb9833214fb3a761fa0c65df777961d434da28a4e4ba5a39c6e6013251e3b27a6baca3ba9b424e7465282832ed298d061564c859959
+  metadata.gz: f7b31e95c34e450c7aee9cced6914576377a1340fb9d226f61b98aedc48d7e6f0e70928a126a20c57c28ea2513df154d9b4c64ea3d17d25b81f2401cabc1ba23
+  data.tar.gz: 53ed7d0d3158c1899215c7bdbb1563bb4df79de68af08fba256a4943ae46edc44f96c7fcb53bedc7dfd5b8d498222222d6a0b62fe85266a2d1bdc19a78b5fd44

data/lib/rubion/scanner.rb

@@ -20,13 +20,14 @@ module Rubion
       end
     end
 
-    def initialize(project_path: Dir.pwd, package_manager: nil)
+    def initialize(project_path: Dir.pwd, package_manager: nil, vulnerabilities_only: false)
       @project_path = project_path
       @result = ScanResult.new
       @package_manager = package_manager
       @package_manager_detected = false
       @direct_gems = nil
       @direct_packages = nil
+      @vulnerabilities_only = vulnerabilities_only
     end
 
     def scan
@@ -51,7 +52,7 @@ module Rubion
         reporter = Reporter.new(@result, sort_by: options[:sort_by], sort_desc: options[:sort_desc],
                                          exclude_dependencies: options[:exclude_dependencies])
         reporter.print_gem_vulnerabilities
-        reporter.print_gem_versions
+        reporter.print_gem_versions unless options[:vulnerabilities_only]
       end
 
       # Then scan NPM packages (if enabled)
@@ -71,6 +72,9 @@ module Rubion
       # Check for vulnerabilities using bundler-audit
       check_gem_vulnerabilities
 
+      # Skip version/outdated checks when only vulnerabilities are requested
+      return if @vulnerabilities_only
+
       # Check for outdated versions using bundle outdated (will show progress)
       check_gem_versions
     end
@@ -93,6 +97,9 @@ module Rubion
       # Check for vulnerabilities using package manager audit
       check_npm_vulnerabilities
 
+      # Skip version/outdated checks when only vulnerabilities are requested
+      return if @vulnerabilities_only
+
       # Check for outdated versions using package manager outdated (will show progress)
       check_npm_versions
     end
@@ -172,6 +179,30 @@ module Rubion
           parse_npm_audit_output(data)
         end
       rescue JSON::ParserError => e
+        # npm audit can emit human-readable errors plus a JSON error object when there is
+        # no lockfile (ENOLOCK) or similar issues. Because we redirect stderr to stdout
+        # (2>&1), the mixed output may not be valid JSON.
+        if @package_manager == 'npm'
+          json_start = stdout.index('{')
+          json_end = stdout.rindex('}')
+
+          if json_start && json_end && json_end > json_start
+            json_str = stdout[json_start..json_end]
+
+            begin
+              error_data = JSON.parse(json_str)
+
+              if error_data.is_a?(Hash) && error_data.dig('error', 'code') == 'ENOLOCK'
+                puts "\n  ℹ️  npm audit requires a package-lock.json. Skipping npm vulnerability check.\n"
+                @result.package_vulnerabilities = []
+                return
+              end
+            rescue JSON::ParserError
+              # Fall through to the generic error below
+            end
+          end
+        end
+
         raise "Failed to parse #{@package_manager} audit JSON output: #{e.message}. Raw output: #{stdout}"
       end
     end

data/lib/rubion/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
 module Rubion
-  VERSION = "0.3.18"
+  VERSION = "0.3.20"
 end
 

data/lib/rubion.rb

@@ -29,7 +29,14 @@ module Rubion
 
     def self.parse_scan_options(args)
       # Default to sorting by "Behind By(Time)" in descending order
-      options = { gems: true, packages: true, sort_by: 'Behind By(Time)', sort_desc: true, exclude_dependencies: false }
+      options = {
+        gems: true,
+        packages: true,
+        sort_by: 'Behind By(Time)',
+        sort_desc: true,
+        exclude_dependencies: false,
+        vulnerabilities_only: false
+      }
 
       # Check for --gems-only or --packages-only flags
       if args.include?('--gems-only') || args.include?('-g')
@@ -58,6 +65,9 @@ module Rubion
       # Parse --exclude-dependencies flag
       options[:exclude_dependencies] = true if args.include?('--exclude-dependencies')
 
+      # Parse --vulnerabilities-only flag
+      options[:vulnerabilities_only] = true if args.include?('--vulnerabilities-only') || args.include?('--vulns-only')
+
       options
     end
 
@@ -65,7 +75,7 @@ module Rubion
                               exclude_dependencies: false })
       project_path = Dir.pwd
 
-      scanner = Scanner.new(project_path: project_path)
+      scanner = Scanner.new(project_path: project_path, vulnerabilities_only: options[:vulnerabilities_only])
       result = scanner.scan_incremental(options)
 
       # Results are already printed incrementally based on options
@@ -78,7 +88,7 @@ module Rubion
       reporter = Reporter.new(result, sort_by: options[:sort_by], sort_desc: options[:sort_desc],
                                       exclude_dependencies: options[:exclude_dependencies])
       reporter.print_package_vulnerabilities
-      reporter.print_package_versions
+      reporter.print_package_versions unless options[:vulnerabilities_only]
     end
 
     def self.print_help
@@ -92,14 +102,15 @@ module Rubion
           rubion help                 Display this help message
 
         SCAN OPTIONS:
-          --gems, --gem, -g           Scan only Ruby gems (skip NPM packages)
-          --packages, --npm, -p       Scan only NPM packages (skip Ruby gems)
-          --all, -a                   Scan both gems and packages (default)
-          --sort-by COLUMN, -s COLUMN Sort results by column (Name, Current, Date, Latest, Behind By(Time), Behind By(Versions))
-                                     (default: "Behind By(Time)" in descending order)
-          --asc, --ascending          Sort in ascending order (use with --sort-by)
-          --desc, --descending        Sort in descending order (use with --sort-by, default)
-          --exclude-dependencies      Show only direct dependencies (from Gemfile/package.json)
+          --gems, --gem, -g               Scan only Ruby gems (skip NPM packages)
+          --packages, --npm, -p           Scan only NPM packages (skip Ruby gems)
+          --all, -a                       Scan both gems and packages (default)
+          --sort-by COLUMN, -s COLUMN     Sort results by column (Name, Current, Date, Latest, Behind By(Time), Behind By(Versions))
+                                         (default: "Behind By(Time)" in descending order)
+          --asc, --ascending              Sort in ascending order (use with --sort-by)
+          --desc, --descending            Sort in descending order (use with --sort-by, default)
+          --exclude-dependencies          Show only direct dependencies (from Gemfile/package.json)
+          --vulnerabilities-only          Show only vulnerability tables (hide version/outdated sections)
 
         DESCRIPTION:
           Rubion scans your project for:
@@ -142,6 +153,9 @@ module Rubion
         #{'  '}
           # Show only direct dependencies
           rubion scan --exclude-dependencies
+        #{'  '}
+          # Show only vulnerabilities (no version/outdated tables)
+          rubion scan --vulnerabilities-only
         #{'  '}
           # Get help
           rubion help

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rubion
 version: !ruby/object:Gem::Version
-  version: 0.3.18
+  version: 0.3.20
 platform: ruby
 authors:
 - bipashant
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-11-21 00:00:00.000000000 Z
+date: 2025-12-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: terminal-table